WordPress plugin
WP ULike – Like Buttons, Voting & Engagement Analytics security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 17 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High3
- Medium14
- Low0
All WP ULike – Like Buttons, Voting & Engagement Analytics vulnerabilities
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attribute
≤5.0.1Update to 5.0.2
- Medium5.3Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Log Deletion via 'id' Parameter
≤4.8.3.1Update to 5.0.0
- Medium5.3Missing Authorization to Unauthenticated Content Spoofing
≤4.7.9.1Update to 4.7.10
- Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
≤4.7.5Update to 4.7.6
- Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
≤4.7.6Update to 4.7.7
- Medium4.3Cross-Site Request Forgery to Statistic Deletion
≤4.7.4Update to 4.7.5
- Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
≤4.7.4Update to 4.7.5
- Medium4.4Authenticated (Admin+) Stored Cross-Site Scripting
≤4.7.3Update to 4.7.4
- Medium6.44.7.2 - Authenticated (Subscriber+) Stored-Cross-Site Scripting
4.7.1 – 4.7.2Update to 4.7.2.1
- Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
≤4.7.0Update to 4.7.1
- High8.8Authenticated (Contributor+) SQL Injection via Shortcodes
≤4.6.9Update to 4.7.0
- Medium6.4Authenticated (Subscriber+) Stored Cross-Site Scripting
≤4.6.9Update to 4.7.0
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
≤4.6.9Update to 4.7.0
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
≤4.6.8Update to 4.6.9
- Medium4.3Race Condition
≤4.6.4Update to 4.6.5
- High7.2Cross-Site Scripting
<3.2Update to 3.2
- High7.5Missing Authorization
<3.2Update to 3.2
WP ULike – Like Buttons, Voting & Engagement Analytics: common questions
Does WP ULike – Like Buttons, Voting & Engagement Analytics have known vulnerabilities?
Yes. VulnCrest Radar lists 17 known vulnerabilities in WP ULike – Like Buttons, Voting & Engagement Analytics: 3 high, 14 medium. None are known to affect version null.
How do I check which version of WP ULike – Like Buttons, Voting & Engagement Analytics I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent WP ULike – Like Buttons, Voting & Engagement Analytics vulnerability?
CVE-2026-2358, published Mar 10, 2026: WP ULike <= 5.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attribute. Severity: Medium (CVSS 6.4).
Is any WP ULike – Like Buttons, Voting & Engagement Analytics vulnerability listed in CISA KEV?
No. None of the known WP ULike – Like Buttons, Voting & Engagement Analytics vulnerabilities is currently listed in the CISA KEV catalog.